Re: Limitation xhost

[Frédéric Bothamy <fbothamy@mail.dotcom.fr>]

* Christian Gennerat <xgen@free.fr> [2003-01-30 15:10] :
> Sur tous mes systèmes précédents, cette séquence marchait.
> En debian woody non.
> 
> 
> xg@valiho:~$ xhost +
> access control disabled, clients can connect from any host
> xg@valiho:~$ xterm -display 127.0.0.1:0.0
> xterm Xt error: Can't open display: 127.0.0.1:0.0
> xg@valiho:~$ xterm -display localhost:0
> xterm Xt error: Can't open display: localhost:0
> 
> bien sur, avec localhost, cela n'a pas d'interet,
> mais avec un autre site, ce n'est pas mieux.

Ce comportement est décrit dans
/usr/share/doc/xfree86-common/README.Debian-upgrade.gz :

TCP AND UDP PORT LISTENING DISABLED BY DEFAULT:

To help ensure a more secure default configuration of your Debian system,
several packages ship with network port listening disabled by default.
This includes xdm, which does not listen on a UDP port for XDMCP requests;
xfs, which does not listen on a TCP port for font requests; and the X
server itself, which, when started by xdm, xinit, or startx, does not
listen on a TCP port for client connections.

This default can be modified by editing the following conffiles:
        xdm     /etc/X11/xdm/xdm-config         (see xdm(1))
        xfs     /etc/X11/fs/config              (see xfs(1))
        X server started by startx/xinit
        /etc/X11/xinit/xserverrc
                                                (see xinit(1))
        X server started by xdm                 /etc/X11/xdm/Xservers
                                                (see xdm(1))


De toute façon, faire un xhost, c'est "mal" (®). Voir le HOWTO
Remote-X-Apps
(http://www.freenix.fr/unix/linux/HOWTO/mini/Remote-X-Apps.html).

Fred